Microsoft reports and patches two flaws in Vista

For those participating in the Windows Vista Beta, Microsoft has recently published two security bulletins regarding some recently discovered security flaws in the OS. The initial report which came on the Vista Blog went over the two bugs, which affect Internet Explorer and the Windows Vista kernel. Both flaws allow remote control of the PC and the ability to remotely administer/alter the machine. Some have criticized Microsoft for issuing security updates while in a beta stage, due to the fluctuating nature of beta software:

"It is expected that there are going to be problems with beta software," Cooper told TechNewsWorld. "Security patches should be the least of a company's concern in a beta test because there will be another build next week and reinstalling it on the machines."Unfortunately, due to the large number of people participating in the beta, not reacting quickly could result in (foolish) people becoming compromised. While people should not be using a beta OS on a production machine, Microsoft may just be covering their bases. A valid point is raised, however, about the response people may have:

"If Microsoft commits to security patches for beta, then how do we convince the general public that they should not expect patches on beta releases, and that they should expect other security issues beyond the vulnerabilities that are being identified?" Cooper asks. "This makes the whole issue of betas muddy and it could open a huge can of worms if people begin to think that betas are as good as a final release."If you are in the beta, you may want to update.